Linux

14763 readers

452 users here now

A community for everything relating to the GNU/Linux operating system (except the memes!)

Also, check out:

Original icon base courtesy of lewing@isc.tamu.edu and The GIMP

founded 3 years ago

MODERATORS

Ategon@programming.dev

anzo@programming.dev

dwraf_of_ignorance@programming.dev

Deep Dive: Zapscape (CVE-2026-64561) - Inside the Linux KVM Guest-to-Host Escape (wp.me)

submitted 2 weeks ago by UnLocoPoco@lemmy.world to c/linux@programming.dev

2 comments fedilink hide all child comments

cross-posted from: https://lemmy.world/post/50395277

Zapscape (CVE-2026-64561) is more than a guest-to-host escape. The vulnerability stems from an ordering flaw in KVM's Shadow MMU page fault handling, where a stale root validation occurs before MMU quota reclaim. Under specific nested virtualization conditions, quota reclaim can invalidate the active shadow root while execution continues, leading to corrupted shadow page state, linked-list corruption, cross-cache reallocation, KASLR disclosure, and ultimately controlled host kernel code execution.

you are viewing a single comment's thread
view the rest of the comments

[–] UnLocoPoco@lemmy.world 3 points 2 weeks ago

After the AI bubble bursts prolly